This Privacy Policy explains how Store Backup for Shopify ("Store Backup", "we", "us") collects, uses, stores and protects information when a merchant installs and uses the Store Backup service for Shopify (the "Service"), and when anyone uses this website. Store Backup is operated by Store Backup & Restore, Geary St STE 1500, San Francisco.
For the data of your store and of your customers, you (the merchant) are the controller and we process it on your behalf, only to back it up and restore it when you ask.
Information we process
- Store data you ask us to protect. Versioned copies of your products, product images, stock by location, collections, customers, orders, pages, blogs, blog posts, menus, URL redirects and themes, read from your store through the Shopify Admin API.
- Personal data of your customers. These copies include your customers' names, email addresses, phone numbers and postal addresses, their marketing consent status, and, in orders, billing and shipping addresses, purchased items, amounts and payment status. Shopify calls this protected customer data. Store Backup never receives card numbers: Shopify does not give them to apps. Customer passwords are never read.
- Store identifiers and access. Your shop domain (your-store.myshopify.com), the permissions you granted, and the access tokens issued by Shopify, which we store encrypted. The session token your Shopify admin sends with each request is checked and never stored.
- Store name and contact email. Used only to send you service emails about your backups and restores (for example, a backup that failed). We do not send marketing emails from the Service.
- Plan information. Your plan and its status as reported by Shopify, and the number of orders your store takes each month, since plans are based on it. Payments are handled by Shopify; we never see your card.
- Messages you send us. When you use the contact form, we store your name, email address, the topic you chose and your message, so that no message is lost and we can answer you. Your IP address is used only to limit abuse of the form: we keep a one-way fingerprint of it, never the address itself, in a counter that expires after two hours.
- Technical logs. Our hosting provider keeps standard web server logs (IP address, date, page requested) to keep the Service secure.
How we use this information
- To run automatic backups of your store, and to restore data when you ask, including the safety copy we save before a restore so you can undo it.
- To show you your backups, compare a saved version with your store, and run restores.
- To send you service emails about your backups and restores, and to answer your messages.
- To keep the Service secure and to meet our legal obligations.
We do not sell your data, share it for advertising, or use your store data for any purpose other than providing the Service to you. We only write to your store when you ask for a restore. Orders are never written back to your store.
Storage and security
- Backups are stored on Cloudflare R2 object storage. Cloudflare encrypts every stored object and its metadata at rest (AES-256), and data travels to and from it over TLS.
- Each store's backups live under their own random storage prefix, and the dashboard only ever shows a store its own backups.
- The access to your store is encrypted at rest in our database. It is deleted as soon as you uninstall the app.
- The application and its database are hosted by Infomaniak, in data centers in Switzerland. The Shopify service has its own database and its own storage, separate from any other platform we support.
- Store Backup only connects through Shopify's own sign-in: every request from your admin carries a fresh token signed by Shopify.
Data retention and deletion
- Saved versions are kept for the history of your plan: Free 30 days, Starter 365 days, Growth 365 days, Pro 365 days, Business 365 days. Older backups are deleted automatically, except a backup you locked and your most recent full backup, which are always kept while your store is connected.
- Uninstalling the app deletes our access to your store at once and stops all backups. 48 hours later, Shopify sends us a request to erase your store's data (shop/redact), and we then delete all your backups, files and store information. If you reinstalled the app in the meantime, nothing is deleted. If that request never arrives, we delete everything 30 days after you uninstalled.
- Customer erasure. When you delete a customer's data in Shopify, Shopify sends us a request (customers/redact). We then erase that customer, and the orders Shopify lists with the request, from every saved version, as soon as we receive it and always within 30 days.
- Customer data requests. When a customer asks you what data is held about them, Shopify sends us the request (customers/data_request), and we give you the data we hold about that customer within 30 days.
- You can ask us to delete all the data of your store at any time by writing to support@expert-ecom.com.
- Messages sent through the contact form are kept as long as needed to answer and follow up on them. You can ask us to delete yours at any time.
Sub-processors
We rely on the following providers to deliver the Service:
| Provider | What it does for us |
|---|---|
| Shopify | The platform your store runs on: the source of the data we back up, and the billing of paid plans. |
| Cloudflare (R2) | Encrypted storage of your backups. |
| Infomaniak | Hosting of the application and its database, in Switzerland. |
| Twilio SendGrid | Delivery of the service emails we send you, and of contact form messages to our support inbox. |
International transfers
Cloudflare and Twilio SendGrid are based in the United States, and your data may be processed in countries other than your own. Where the law requires it, we rely on appropriate safeguards for these transfers, such as the standard contractual clauses of our providers.
Your rights
Depending on where you live, you may have the right to access, correct, export or delete your personal data, and to object to or restrict some processing. To use these rights, write to support@expert-ecom.com or use the contact form. Because the store data we hold belongs to your store, we answer requests from the store's owner. Requests from your customers are handled with you, as described above.
Changes to this policy
We may update this policy. When we do, we change the "Last updated" date above and, for important changes, tell you by email or in the app.
Contact
Questions about this policy or your data? Write to support@expert-ecom.com, or use the contact form.